The T&Cs are satisfied since the entity redeeming the ticket is identified -- just not as an individual person. The owner is set when the back of the ticket is signed (http://www.bna.com/taxpayer-pay-gift-b12884908246/) and that can be any legal entity from the looks of that article.
Isn't that equivalent to music companies having no obligation to supply a replacement if your CD is damaged? The theory as I understand it is the license is part of the media, in this case the 'media' is Steam -- I suspect they will not be moved if 'Steam' is damaged.
I recall the old floppy-based copy-protected games would sometimes offer to replace media if it failed, but not always.
I suspect it'll require some sort of signup and beacon placement for the drone to know where to place the package; say by placing multiple beacons in your yard / on your building roof (for larger buildings) that designate the boundaries where the objects can be placed. The beacons could also transmit the destination GPS coordinates for en-route navigation, but gps is probably not enough for the final drop. That would have to rely on a signal from the beacons themselves.
The beacons can also act as warnings that a flight is incoming (lights / sounds, etc) and be able to do some sort of sweep if anything is blocking the landing pad.
Or perhaps a 'landing tarp' that has a pattern on it that the drone computer vision can use to determine if anything is in the way (such as expect a regular grid pattern); if any of the grid is obscured then abort.
Installing Open Connect means Comcast avoids costs in maintaining higher capacity edge routers, and can place the caching boxes wherever is efficient for their own network topology. For example, if placed in each geographic region hub, it means their own long-haul trunks are less stressed and do not need to be upgraded as soon. If you take as a given that customers will want to watch NetFlix, then the costs of hosting these cache boxes is supposed to be offset by the reduced pressure on the long-distance Comcast network connections.
The NSA can't subvert a keyserver. At least, at worst they can replace the keys with their own, but then the Web Of Trust would render those keys untrusted. Getting the key from a keyserver or copying it from a webpage is equivalent. The benefit of the keyserver is if you get an email from someone signed by key X, your client can fetch the key from the keyserver then calculate if you have any trust of that key.
Also, I see that your key is on a keyserver: http://pgpkeys.mit.edu/pks/loo... as any key can be published to a keyserver regardless if you have the corresponding private key.
It seems improbable that a 'Enterprise' Customer Relationship Management system that Comcast must be using wouldn't have a detailed history on account changes, such as who submitted a name change. There should be no mystery as to who is changed the names.
Unless someone has hacked in to the underlying database and is bypassing the business logic, in which case Comcast has a serious problem on their hands.
Hosted applications may or may not handle the passwords properly after they've been entered into the form. It is inescapable that the host must have the raw keys in order to decrypt the data. It may be impervious to 3rd parties *now* but there's nothing that prevents that from changing, and the user has no way of detecting it.
Similarly for mobile applications -- unless one has firsthand knowledge that the currently installed application will not transmit raw keys to a 3rd party, AND prevents all future updates to that application, then the security is fleeting.
It may be that the promise of security is enough for a given use case, but to be sure one needs to encrypted the data with keys that are never transmitted to a 3rd party prior to uploading the data.
Another way of looking at it: If an entity were to hold a figurative gun to the head of a mobile app developer / hosting provider, in such a way that you as a user were unaware of it (ie were still willing to use the application / provider in the normal course of usage), could the application be changed such that the data is exposed?
Every single-player exploration game falls under the 'could make exploration pointless' category, yet they are still fun games.
It doesn't make sense that a game with one player requires more CPU then a desktop can provide -- tracking that a NPC spawned some items on a market in various star systems is not that intensive. The CPU intensity of MMOs comes from tracking all the player interactions and routing/filtering those actions, not the spawn rates of various events.
The alternative is to say that one players interactions require more resources then a desktop CPU can provide, which bodes poorly for the scalability / longevity of the game if they need 1.5 cloud-nodes to run 1 player's simulation.
It had to be plugged in to operate, the manufacturer was directly involved in several parts of the test, and it sounds like the outputs were measured in a questionable way. It'd be awesome if it was true, but there is a lot of room for tricks in that.
Even if nobody knows how it works, it should be possible for one of these to be handed off to a disinterested 3rd party with the appropriate inputs detailed, and have it function such that it can be detached from external power and continue to generate significant heat.
But, having the manufacturer involved with setting up the test and fiddling with it partway through casts great suspicion on the claims.
Then you'd have people ransacking stores looking for serial #'s that test above their price level, buy them all up and resell them after unlocking them. Instead, perhaps publish a serial #/model catalog. That works so long as the serial # on the card is relatively tamper-evident, and the manufacture has to be ok with essentially exposing their exact manufacturing numbers. Probably not especially palatable.
You can use S3 to interact with glacier; create a 'VHS Archive' bucket with a bucket policy to migrate to Glacier after X days. Upload everything there and let it sit; this sort of use case is *exactly* the sort of thing Glacier was intended for.
I've seen short password length on a bank site that showed the password field as a phone-keypad; I assume the same code would work if you dialed into their IVR.
Exactly. The failure of a cloud-backup service is only an issue if it occurs concurrently with a failure of your primary storage system. The trick is to check that the backup system works periodically instead of finding out that your backups were going to the bitbucket 3 years ago.
Exactly. It is useful to be able to demonstrate that a given request/response occurs with minimal interference. Otherwise there is always questions as to whether FireFox or Curl is sending a request 'differently' somehow; being able to show that a given behavior is reproducible with a request issued over least-common-denominator telnet is inarguable.
Additionally, telnet is nearly ubiquitous while protocol analyzers are much harder to find, plus are often forbidden on desktops in large corporate environments as a security issue either due to their sniffing capability or for innate vulnerabilities.
They may be required to accept cash, but it can be very inconvenient. Cash transferred via 3rd parties (mail, drop-box, etc) could be pocketed'/lost' before it gets credited to your account, leaving you to pay the bill again plus late fees with no recourse as there is no paper trail. The alternative of spending a solid weekday (not everyone has a weekend office open) each month traveling to places where you can hand the cash to a person/machine and get an immediate receipt is not practical for many.
Indeed. A frequent caller would normally find out that the options have changed on their first call after the change by way of being misrouted. An infrequent caller will have to listen to the prompts anyway. Telling both classes that the options have changed on every call takes up everyones time and rarely actually helps anyone.
Legally, you do not have to pay any taxes until your file your tax return, but if you earn a taxable income of US$50,000.00, you will have to write a check for US$12,500.00 when you file your taxes.
Income taxes have to be paid throughout the year; if you are in a situation where you do not have an employer to do witholding on your income then you have to pay estimated tax payments. You can't just hold on to all the income tax money untill the end of the year and pay it in a lump sum; you'll be penalized for that.
It is not going to actually delete the content, just the licenses that allow you to watch it. Restoring those is designed to be tricky to prevent abuse.
Does that account for any of the various 'rebates' that are kicked back down the chain? IE 'advertising rebate', a bonus for selling certain volumes, distributor-paid advertising, etc. There a lots of ways the margin might be higher per-unit without having the MSRP built it in.
Slashdot Mirror
How can you reasonably have 500 drivers vying for the same fare and also have 30 people in a 8 person minibus? What is the motivation to overcrowd?
The T&Cs are satisfied since the entity redeeming the ticket is identified -- just not as an individual person. The owner is set when the back of the ticket is signed (http://www.bna.com/taxpayer-pay-gift-b12884908246/) and that can be any legal entity from the looks of that article.
Isn't that equivalent to music companies having no obligation to supply a replacement if your CD is damaged? The theory as I understand it is the license is part of the media, in this case the 'media' is Steam -- I suspect they will not be moved if 'Steam' is damaged.
I recall the old floppy-based copy-protected games would sometimes offer to replace media if it failed, but not always.
I suspect it'll require some sort of signup and beacon placement for the drone to know where to place the package; say by placing multiple beacons in your yard / on your building roof (for larger buildings) that designate the boundaries where the objects can be placed. The beacons could also transmit the destination GPS coordinates for en-route navigation, but gps is probably not enough for the final drop. That would have to rely on a signal from the beacons themselves.
The beacons can also act as warnings that a flight is incoming (lights / sounds, etc) and be able to do some sort of sweep if anything is blocking the landing pad.
Or perhaps a 'landing tarp' that has a pattern on it that the drone computer vision can use to determine if anything is in the way (such as expect a regular grid pattern); if any of the grid is obscured then abort.
Lacking access to the password data base AND assuming a rate-limiter, the attacker can't realistically try a brute-force.
However, most of the time the password list is exposed in some way and attacked offline to get the original passwords.
Installing Open Connect means Comcast avoids costs in maintaining higher capacity edge routers, and can place the caching boxes wherever is efficient for their own network topology. For example, if placed in each geographic region hub, it means their own long-haul trunks are less stressed and do not need to be upgraded as soon. If you take as a given that customers will want to watch NetFlix, then the costs of hosting these cache boxes is supposed to be offset by the reduced pressure on the long-distance Comcast network connections.
The NSA can't subvert a keyserver. At least, at worst they can replace the keys with their own, but then the Web Of Trust would render those keys untrusted. Getting the key from a keyserver or copying it from a webpage is equivalent. The benefit of the keyserver is if you get an email from someone signed by key X, your client can fetch the key from the keyserver then calculate if you have any trust of that key.
Also, I see that your key is on a keyserver: http://pgpkeys.mit.edu/pks/loo... as any key can be published to a keyserver regardless if you have the corresponding private key.
It seems improbable that a 'Enterprise' Customer Relationship Management system that Comcast must be using wouldn't have a detailed history on account changes, such as who submitted a name change. There should be no mystery as to who is changed the names.
Unless someone has hacked in to the underlying database and is bypassing the business logic, in which case Comcast has a serious problem on their hands.
Hosted applications may or may not handle the passwords properly after they've been entered into the form. It is inescapable that the host must have the raw keys in order to decrypt the data. It may be impervious to 3rd parties *now* but there's nothing that prevents that from changing, and the user has no way of detecting it.
Similarly for mobile applications -- unless one has firsthand knowledge that the currently installed application will not transmit raw keys to a 3rd party, AND prevents all future updates to that application, then the security is fleeting.
It may be that the promise of security is enough for a given use case, but to be sure one needs to encrypted the data with keys that are never transmitted to a 3rd party prior to uploading the data.
Another way of looking at it: If an entity were to hold a figurative gun to the head of a mobile app developer / hosting provider, in such a way that you as a user were unaware of it (ie were still willing to use the application / provider in the normal course of usage), could the application be changed such that the data is exposed?
Every single-player exploration game falls under the 'could make exploration pointless' category, yet they are still fun games.
It doesn't make sense that a game with one player requires more CPU then a desktop can provide -- tracking that a NPC spawned some items on a market in various star systems is not that intensive. The CPU intensity of MMOs comes from tracking all the player interactions and routing/filtering those actions, not the spawn rates of various events.
The alternative is to say that one players interactions require more resources then a desktop CPU can provide, which bodes poorly for the scalability / longevity of the game if they need 1.5 cloud-nodes to run 1 player's simulation.
It had to be plugged in to operate, the manufacturer was directly involved in several parts of the test, and it sounds like the outputs were measured in a questionable way. It'd be awesome if it was true, but there is a lot of room for tricks in that.
Even if nobody knows how it works, it should be possible for one of these to be handed off to a disinterested 3rd party with the appropriate inputs detailed, and have it function such that it can be detached from external power and continue to generate significant heat.
But, having the manufacturer involved with setting up the test and fiddling with it partway through casts great suspicion on the claims.
Then you'd have people ransacking stores looking for serial #'s that test above their price level, buy them all up and resell them after unlocking them. Instead, perhaps publish a serial #/model catalog. That works so long as the serial # on the card is relatively tamper-evident, and the manufacture has to be ok with essentially exposing their exact manufacturing numbers. Probably not especially palatable.
Beware 'overdraft protection' on that account where they'll extend you some credit and come after you for it later, with a ton of fees on top.
You can use S3 to interact with glacier; create a 'VHS Archive' bucket with a bucket policy to migrate to Glacier after X days. Upload everything there and let it sit; this sort of use case is *exactly* the sort of thing Glacier was intended for.
I've seen short password length on a bank site that showed the password field as a phone-keypad; I assume the same code would work if you dialed into their IVR.
Exactly. The failure of a cloud-backup service is only an issue if it occurs concurrently with a failure of your primary storage system. The trick is to check that the backup system works periodically instead of finding out that your backups were going to the bitbucket 3 years ago.
Thats fine unless both the house and datacenter burn down at around the same time.
Strictly speaking it is the speed of the active miners, not the total number of them.
Exactly. It is useful to be able to demonstrate that a given request/response occurs with minimal interference. Otherwise there is always questions as to whether FireFox or Curl is sending a request 'differently' somehow; being able to show that a given behavior is reproducible with a request issued over least-common-denominator telnet is inarguable.
Additionally, telnet is nearly ubiquitous while protocol analyzers are much harder to find, plus are often forbidden on desktops in large corporate environments as a security issue either due to their sniffing capability or for innate vulnerabilities.
They may be required to accept cash, but it can be very inconvenient. Cash transferred via 3rd parties (mail, drop-box, etc) could be pocketed'/lost' before it gets credited to your account, leaving you to pay the bill again plus late fees with no recourse as there is no paper trail. The alternative of spending a solid weekday (not everyone has a weekend office open) each month traveling to places where you can hand the cash to a person/machine and get an immediate receipt is not practical for many.
There are plenty of deep-packet-inspection appliances that can discern between one type of port-80 traffic and another.
Indeed. A frequent caller would normally find out that the options have changed on their first call after the change by way of being misrouted. An infrequent caller will have to listen to the prompts anyway. Telling both classes that the options have changed on every call takes up everyones time and rarely actually helps anyone.
Legally, you do not have to pay any taxes until your file your tax return, but if you earn a taxable income of US$50,000.00, you will have to write a check for US$12,500.00 when you file your taxes.
Income taxes have to be paid throughout the year; if you are in a situation where you do not have an employer to do witholding on your income then you have to pay estimated tax payments. You can't just hold on to all the income tax money untill the end of the year and pay it in a lump sum; you'll be penalized for that.
http://www.irs.gov/businesses/small/article/0,,id=110413,00.html
It is not going to actually delete the content, just the licenses that allow you to watch it. Restoring those is designed to be tricky to prevent abuse.
Does that account for any of the various 'rebates' that are kicked back down the chain? IE 'advertising rebate', a bonus for selling certain volumes, distributor-paid advertising, etc. There a lots of ways the margin might be higher per-unit without having the MSRP built it in.